2 Step Verifcation on EVERYTHING
Phone Verification
VPN on at all times usually
On sketchy sites i use completely different passwords
Never use the same password on the same site
Run shady programs on VMware